WO2011008192A1 - Procédé, système et dispositif de sécurisation d’un dispositif de mémorisation numérique - Google Patents

Procédé, système et dispositif de sécurisation d’un dispositif de mémorisation numérique Download PDF

Info

Publication number
WO2011008192A1
WO2011008192A1 PCT/US2009/050340 US2009050340W WO2011008192A1 WO 2011008192 A1 WO2011008192 A1 WO 2011008192A1 US 2009050340 W US2009050340 W US 2009050340W WO 2011008192 A1 WO2011008192 A1 WO 2011008192A1
Authority
WO
WIPO (PCT)
Prior art keywords
storage device
encryption
data
host
condition
Prior art date
Application number
PCT/US2009/050340
Other languages
English (en)
Inventor
Leonard E. Russo
Original Assignee
Hewlett-Packard Development Company, L.P.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hewlett-Packard Development Company, L.P. filed Critical Hewlett-Packard Development Company, L.P.
Priority to GB1201099.7A priority Critical patent/GB2484041B/en
Priority to US13/383,383 priority patent/US8868920B2/en
Priority to PCT/US2009/050340 priority patent/WO2011008192A1/fr
Priority to DE112009004950T priority patent/DE112009004950T5/de
Priority to CN200980160426.0A priority patent/CN102473225B/zh
Publication of WO2011008192A1 publication Critical patent/WO2011008192A1/fr

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
    • G06F21/80—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data in storage media based on magnetic or optical technology, e.g. disks with sectors
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/72—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in cryptographic circuits
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/74—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2105—Dual mode as a secondary aspect
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2107—File encryption
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2147—Locking files
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords

Definitions

  • the present invention relates to a method, system and device for securing a digital storage device. More particularly, but not exclusively, the present invention relates to a method of locking a digital storage device so that unauthorized data access to that storage device is denied, a data system capable of denying unauthorized data access to a digital storage device, and a digital storage device, comprising an Advanced Technology Attachment (ATA) interface for providing data access to a host processing unit.
  • ATA Advanced Technology Attachment
  • Digital storage devices are equipped with hardware interfaces for connection to host computers.
  • An interface for providing access to a storage device within a host computer is the Advanced Technology Attachment (ATA).
  • ATA Advanced Technology Attachment
  • Known storage devices inside host computers such as for example hard disk drives (HDD) and solid state drives (SSD) are oftentimes equipped with ATA interfaces.
  • the security feature set one of the features of the command set.
  • the security feature set includes a security set password command for restricting access to user data stored on the digital storage device.
  • the storage device may be locked or unlocked using a user password.
  • the security set password is enabled, the storage device is locked, i.e.
  • the security set password is enabled by using the security password. Only after a power-on reset the security set 200900475
  • the security feature set allows a user or system to digitally lock a storage device so that unauthorized persons and/or unauthorized systems cannot access the storage device.
  • the security password cannot be provided by the user or the other computer.
  • the storage device cannot be unlocked by the new host computer, and cannot be accessed.
  • a security feature set can be set by a computer provider, or by and end user.
  • the security feature set can for example be accessed through the BIOS.
  • the storage device provider may unlock the storage device using a master password, which is generally not available to end users.
  • Encryption may be defined as the process of transforming data using an algorithm (which may be called cipher) to make it unreadable to systems or users except those systems or uses that possess special knowledge, usually referred to as a key.
  • encrypted data or data encryption may for example only be allowed if it is encrypted according to specific standards, for example local standards, and/or if specific licenses or certifications are obtained before the storage device enters the region. In some regions, it may not be allowed to encrypt data on a computer at all.
  • Foreign storage devices with encrypted data or data encryption capabilities may 200900475
  • Fig. 1 shows a data system
  • Fig. 2 shows a flow chart of a method of locking a digital storage device and enabling or disabling encryption on that storage device.
  • a data system 1 which may comprise a host 2 and a digital storage device 3.
  • the latter may also be referred to as a storage device 3.
  • the host 2 may comprise a central processing unit (CPU) for processing data in the 200900475
  • the host 2 may comprise a host connection interface 4 for data transfer to and from other devices that are connected in and/or to the host 2.
  • the host connection interface 4 may comprise an interface that is arranged for connection to the storage device 3.
  • the host 2 may further comprise one or more of a Basic Input/Output System (BIOS), at least one driver, at least one software application, Random Access Memory, Read Only Memory, and any additional number of circuits, connectors and software
  • BIOS Basic Input/Output System
  • the storage device 3 may for example comprise a hard disk drive, a solid state drive or any other device for storing digital data.
  • the storage device 3 may comprise a storage device connection interface 5 arranged to transfer data to and from the storage device 3, between the storage device 3 and the connected piece of hardware.
  • the storage device connection interface 5 may comprise an interface that is arranged to connect to the host 2, to deliver data to, and receive data from, the host 2.
  • the storage device 3 may further comprise a data storage section 6.
  • the data storage section 6 may be arranged to store at least one, tens, hundreds or thousands of gigabytes of digital data.
  • the storage device 3 may comprise a firmware section 7 that is preprogrammed to process and allocate incoming data.
  • the data system 1 may comprise a computer, a personal computer, a digital media player or the like.
  • the storage device 3 may be arranged inside the housing of the data system 1.
  • the storage device 3 may comprise stand alone devices and may be arranged to be manually connected and/or disconnected from the host 2.
  • the host connection 4 and the storage device connection interface 5 may comprise interconnecting interfaces corresponding to a certain standard.
  • the interfaces 4, 5 may be arranged according to the Advanced Technology Attachment (ATA), sometimes also known as Integrated (or Intelligent) Drive 200900475
  • the ATA interface may include Serial ATA, Parallel ATA, Fiber Channel ATA, or other similar techniques.
  • the interfaces 4, 5 may for example also comprise a Serial Attached Small Computer System
  • the host 2 may be configured to lock the storage device 3.
  • the host 2 may comprise a security software application 8 for locking the storage device 3.
  • the security software application 8 may be configured to restrict or deny access to user data stored on the storage device 3.
  • the security software application 8 may comprise a security feature set functionality according to the ATA/ATAPI command set (ATA8-ACS). More information about the command set can be found in, inter alia, the INCITS (International Committee for Information Technology Standards) 452-2008 (D1699): AT Attachment 8 - ATA/ATAPI Command Set standard documentation, which is publically available.
  • the command set may comprise instructions for the storage device firmware so as to configure certain storage device settings. Instructions relating to locking and/or unlocking the storage device 3 may be included in the security feature set.
  • the security software application 8 may be configured to issue a security password to the storage device 3 for locking the storage device 3, also referred to as the security set password command in accordance with the ATA/ATAPI command set standard.
  • the storage device 3 may be locked so as to deny access to data on the storage device 3 unless the correct password is used to unlock the storage device 3.
  • the security software application 8 may be arranged to instruct the storage device firmware section 7 to lock the storage device 3, for example using the security password of the ATA/ATAPI command set.
  • the security software application 8 may be a section of the system Basic Input/Output system (BIOS).
  • BIOS Basic Input/Output system
  • the security software application 8 may be included in host firmware.
  • the security software application may comprise a driver or software application that is configured to 200900475
  • the storage device firmware section 7 may be configured so as to process security instructions according to the ATA/ATAPI command set.
  • the storage device firmware section 7 may be configured to store a ' security password locked ' condition of the storage device 3 so that the data on the storage section 6 cannot be accessed.
  • ATA/ATAPI command set may be applied.
  • other security password instructions than the security set password command may be applied for locking the storage device 3, and the software security application 8 and the storage device firmware section 7 may also be configured accordingly.
  • the security software application 8 may be configured to set an encryption condition of the storage device 3.
  • the security software application may be configured to set an encryption management condition of the storage device 3.
  • encryption on the storage device 3 may be enabled, or encryption on the storage device 3 may be disabled. Encryption enabled and encryption disabled may be considered as different encryption conditions.
  • the security software application 8 may be configured to enable or disable encryption of data on the storage device 3, in particular on the storage section 6 thereof. In this description it may be understood that when encryption is enabled, data encryption on the storage device 3 is facilitated, and that when encryption is disabled, data encryption on the storage device 3 is not facilitated.
  • the encryption enablement function may comprise an encryption key management tool. For example, when encryption on the storage device is enabled the data on the storage device may be pre-encrypted. 200900475
  • the data on the storage device Prior to encryption being enabled, the data on the storage device is pre-encrypted but is still freely accessible.
  • the encryption keys may be provided to activate the encryption. When these keys are applied the data may not be freely accessible anymore.
  • the security password is enabled a user may be prevented from accessing the storage device 3 and the encryption keys stored thereon.
  • encryption is disabled, a user may access the storage device 3 as well as the data stored thereon.
  • the security password is disabled and encryption is enabled, a user may access the storage device 3 but may not access the data because it is encrypted. The user may access the data by applying the encryption keys.
  • a user may access the storage device 3 and may access the data.
  • the data may be pre-encrypted but is still freely accessible.
  • encryption keys may be provided so that the user may apply the encryption lock.
  • Encryption of data on the storage device 3 may be enabled or disabled via the firmware section 7 of the storage device 3.
  • the firmware section 7 may be configured to process and store the encryption condition as instructed by the security software application 8.
  • the firmware section 7 may be set so that encryption is enabled, or the firmware section 7 may be set so that encryption is disabled.
  • the security software application 8 may be arranged to enable or disable encryption on the storage device 3 by sending a data bundle that includes the security set password command.
  • the storage device 3 may be locked and encryption may be enabled by sending a data bundle comprising the ATA/ATAPI 200900475
  • the data bundle may comprise a command structure and a data package, a part of which may be used for specific ATA/ATAPI standard commands.
  • the encryption condition instructions may be included in certain sections of the command structure and/or the data package that are not taken by the ATA/ATAPI commands.
  • the storage device registers may be re-set when issuing the security password command.
  • the registers named Feature, Sector count, LBA Low, LBA Mid, LBA high may be used to indicate that the storage device 3 is enabling or disabling encryption. These registers may remain unaffected by the security password command so that they are available for setting an encryption allowance condition. Also lower bits 3:0 of the register named Device may be available for setting an encryption condition. Encryption may be enabled by setting at least one bit in any of these register sections to one.
  • Encryption may be disabled by setting at least one bit in any of these register sections to zero.
  • the storage device firmware 7 may be configured to process a data bundle comprising both the security password and the encryption condition instructions.
  • the firmware 7 may be configured to store the encryption condition by setting a bit in one of the register sections Feature, Sector count, LBA low, LBA mid, LBA high, Device lower bits 3:0 to one or zero, respectively for enabling or disabling encryption.
  • the security software application 8 may be configured to issue a data bundle comprising the security password and the encryption condition.
  • the data bundle may comprise a command structure and a data package.
  • the data package may comprise 512 bytes that is
  • the data package may also be of different sizes, for example one kilobyte.
  • the command structure may comprise a 28 bit command containing the security password, 200900475
  • bit size may be different and subject to changes, as may be
  • the data package may be sent together with the security password command, a part of the data package may be available to set the encryption conditions.
  • the data package may comprise at least one byte that is configured to set the encryption condition of the storage device.
  • the storage device firmware 7 may be configured to store the encryption condition based on that at least one byte. Also multiple bytes may be used to set the encryption condition.
  • a method of securing a storage device 3 is shown in Fig. 2.
  • the security password may be enabled via the BIOS, or another software application such as a driver, in step 100.
  • the host 2 may lock the storage device 3, wherein the storage device 3 may be accessed at a next boot by entering the security password.
  • Encryption may be enabled or disabled in step 110.
  • the security software application 8 may ask a user to set the encryption condition, or the user or system may have to actively indicate the encryption condition. If in the latter case, the user or system does not choose an encryption condition, the system may itself switch to a default, which may either be an encryption enabling or disabling condition.
  • the encryption condition may be indicated via the BIOS or another software application.
  • the encryption condition may be set when the security password is enabled. For example, either the drive is locked and data encryption is enabled, or the drive is locked and data encryption is disabled, or the drive is unlocked.
  • encryption may be enabled (120) or disabled (130).
  • a user or system may enable encryption in one way, or a combination of ways.
  • encryption may be enabled by setting at least one bit in one of the registers of the storage device 3 named Features, Sector Count, LBA Low, LBA Mid, LBA High or in bits 3:0 of Device to one. This may indicate to the storage 200900475
  • the encryption enabling instruction may be included in the data bundle that includes the security password command.
  • One or multiple bits in one or more registers may be set to enable encryption.
  • encryption may be enabled by choosing or combining different methods.
  • a byte within the data package communicated to the device may be used to indicate to the storage device firmware 7 that encryption is enabled, as indicated by step 160.
  • the data package may be included in the data bundle that includes the security password command.
  • encryption is enabled, and the security password is enabled.
  • the security password has to be entered to access the storage device 3. Since encryption is enabled, data on the storage device 3 may be pre-encrypted and/or encryption keys may be provided.
  • a user or system may opt for disabling encryption at step 130.
  • a user or system may disable encryption in one way, or a combination of ways.
  • encryption may be disabled by setting at least one bit in one of the registers of the storage device 3 named Features, Sector Count, LBA Low, LBA Mid, LBA High or in bits 3:0 of Device to zero. This may indicate to the storage device 3 that encryption is disabled.
  • the encryption disabling instruction may be included in the data bundle that includes the security password command.
  • One or multiple bits in one or more registers may be set to disable encryption.
  • encryption may be disabled by choosing or combining different methods.
  • a byte within the data package communicated to the device may be used to instruct to the storage device firmware 7 that encryption is disabled, as indicated by step 200.
  • the data package may be included in the data bundle that includes the security password command. 200900475
  • encryption may be disabled, and the security password may be set. Then, the system 1 may be rebooted, wherein the storage device 3 is locked. If a correct security password is entered through the security software application 8 the storage device 3 may be accessed. Since encryption is disabled, data on the storage device 3 cannot be encrypted.
  • a method of securing a digital storage device 3. may include that a host 2 is connected to the storage device 3. The method may also include that the host 2 digitally locks the storage device 3 so that unauthorized data access to the storage device 3 may be denied. The method may further include that the host 2 may set the encryption conditions of the storage device 3 in a condition wherein encryption of data on the storage device 3 is enabled, and/or in a condition wherein encryption of data on the storage device is disabled, as shown in an exemplary embodiment in Fig. 2, for example steps 170 and 210, respectively.
  • a data system 1 capable of denying unauthorized access to a storage device 3.
  • the system 1 may comprise a host 2 and a digital storage device 3.
  • the host 2 may be provided with a CPU, a security software application 8 and a host connection interface 4.
  • the storage device 3 may be provided with a firmware section 7, a data storage section 6 and/or a storage device connection interface 5.
  • the interfaces 4, 5 may be arranged to be connected to each other to allow data transfer between the storage device 3 and the host 2.
  • the security software application 8 may be configured to issue a security password to the storage device 3 for locking the storage device 3 and/or to set an encryption condition of the data storage section 6.
  • the storage device 3 may be configured to store an encryption condition of the storage device 3 so that encryption of the storage device 3 is enabled or disabled.
  • the digital storage device 3 may comprise a data storage section 6, a firmware section 200900475
  • the storage section 6, for example the firmware section 7 thereof, may be configured to (i) process a data bundle comprising a Set Security Password and encryption condition instructions, (ii) digitally lock the storage device 3 through the Set Security Password instruction, and /or (iii) store the encryption condition of the storage device 3 in one of (i) a condition wherein encryption of data on the storage device is enabled (e.g. see step 170), and/or (ii) a condition wherein encryption of data on the storage device is disabled (e.g. see step 210), based on said encryption condition instructions.
  • the combined locking and encryption feature as explained above may be advantageous for selectively enabling and disabling data encryption on storage devices 3, depending on a particular geographical region to which they are to be exported by the use of the ATA command set standard, which may already be applied as a standard in most storage device inside a computer.
  • a batch of storage devices that is intended to be transported to a geographical region having no encryption restrictions may be locked while having encryption enabled. This may allow for the option of importing locked storage devices 3 having encrypted or easy encryptable data into those regions.
  • a batch of storage devices 3 that is intended to be transported to a geographical region that does not allow encryption may have encryption disabled. This may allow relatively easy import of those storage devices 3 into those restrictive regions.
  • the storage device 3 may be locked so as to provide for another form of security.
  • the storage devices 3 may be transported to substantially all geographical regions, while being secured.
  • the encryption conditions may be set using the data bundle that includes the ATA/ATAPI security feature set. 200900475

Abstract

L’invention concerne un procédé de sécurisation d’un dispositif de mémorisation numérique. Dans ce procédé, un hôte est connecté au dispositif de mémorisation, l'hôte verrouille numériquement le dispositif de mémorisation de sorte qu'un accès non autorisé aux données du dispositif de mémorisation soit refusé, l'hôte fixe les conditions de chiffrement du dispositif de mémorisation dans l'une d'une condition dans laquelle le chiffrement des données sur le dispositif de mémorisation est activé et d'une condition dans laquelle le chiffrement des données sur le dispositif de mémorisation est désactivé.
PCT/US2009/050340 2009-07-12 2009-07-12 Procédé, système et dispositif de sécurisation d’un dispositif de mémorisation numérique WO2011008192A1 (fr)

Priority Applications (5)

Application Number Priority Date Filing Date Title
GB1201099.7A GB2484041B (en) 2009-07-12 2009-07-12 Method of securing a digital storage device
US13/383,383 US8868920B2 (en) 2009-07-12 2009-07-12 Method, system and device for securing a digital storage device
PCT/US2009/050340 WO2011008192A1 (fr) 2009-07-12 2009-07-12 Procédé, système et dispositif de sécurisation d’un dispositif de mémorisation numérique
DE112009004950T DE112009004950T5 (de) 2009-07-12 2009-07-12 Verfahren, System und Vorrichtung zum Sichern einer digitalen Speichervorrichtung
CN200980160426.0A CN102473225B (zh) 2009-07-12 2009-07-12 用于保护数字存储设备的方法、系统和设备

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/US2009/050340 WO2011008192A1 (fr) 2009-07-12 2009-07-12 Procédé, système et dispositif de sécurisation d’un dispositif de mémorisation numérique

Publications (1)

Publication Number Publication Date
WO2011008192A1 true WO2011008192A1 (fr) 2011-01-20

Family

ID=43449612

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2009/050340 WO2011008192A1 (fr) 2009-07-12 2009-07-12 Procédé, système et dispositif de sécurisation d’un dispositif de mémorisation numérique

Country Status (5)

Country Link
US (1) US8868920B2 (fr)
CN (1) CN102473225B (fr)
DE (1) DE112009004950T5 (fr)
GB (1) GB2484041B (fr)
WO (1) WO2011008192A1 (fr)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8560845B2 (en) * 2011-01-14 2013-10-15 Apple Inc. System and method for tamper-resistant booting
KR20150081022A (ko) * 2014-01-03 2015-07-13 삼성전자주식회사 영상처리장치 및 그 제어방법
US10963592B2 (en) * 2019-02-05 2021-03-30 Western Digital Technologies, Inc. Method to unlock a secure digital memory device locked in a secure digital operational mode

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030226025A1 (en) * 2002-06-04 2003-12-04 Chanson Lin Data security method of storage media
US20070016800A1 (en) * 2005-07-12 2007-01-18 Jason Spottswood System and method for programming a data storage device with a password
US20070113279A1 (en) * 2005-11-14 2007-05-17 Phison Electronics Corp. [portable storage device]
US20080163350A1 (en) * 2006-12-29 2008-07-03 Feitian Technologies Co., Ltd. Portable information security device
KR20080101799A (ko) * 2007-05-18 2008-11-21 엠시엠 포트폴리오 엘엘씨 외부 장치에 보안을 제공하기 위한 시스템과 방법
US20090046858A1 (en) * 2007-03-21 2009-02-19 Technology Properties Limited System and Method of Data Encryption and Data Access of a Set of Storage Devices via a Hardware Key

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060174352A1 (en) * 2001-07-25 2006-08-03 Seagate Technology Llc Method and apparatus for providing versatile services on storage devices
JP2007272476A (ja) * 2006-03-30 2007-10-18 Fujitsu Ltd 情報記憶装置
US8122258B2 (en) * 2006-05-22 2012-02-21 Hewlett-Packard Development Company, L.P. System and method for secure operating system boot
KR20080010799A (ko) * 2006-07-28 2008-01-31 삼성전자주식회사 액정표시장치 및 이의 구동 방법
US7971241B2 (en) 2006-12-22 2011-06-28 Hitachi Global Storage Technologies Netherlands, B.V. Techniques for providing verifiable security in storage devices
US20080184035A1 (en) 2007-01-30 2008-07-31 Technology Properties Limited System and Method of Storage Device Data Encryption and Data Access
ITTO20070421A1 (it) * 2007-06-13 2008-12-14 Elsag Spa Sistema per il trasporto di gruppi di oggetti postali parzialmente sovrapposti
US8556991B2 (en) * 2008-08-08 2013-10-15 Absolute Software Corporation Approaches for ensuring data security
US8266449B2 (en) * 2009-03-31 2012-09-11 Lenovo (Singapore) Pte. Ltd. Security for storage devices
US8145891B2 (en) * 2009-04-09 2012-03-27 Dell Products L.P. Bios-selectable data wiping system

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030226025A1 (en) * 2002-06-04 2003-12-04 Chanson Lin Data security method of storage media
US20070016800A1 (en) * 2005-07-12 2007-01-18 Jason Spottswood System and method for programming a data storage device with a password
US20070113279A1 (en) * 2005-11-14 2007-05-17 Phison Electronics Corp. [portable storage device]
US20080163350A1 (en) * 2006-12-29 2008-07-03 Feitian Technologies Co., Ltd. Portable information security device
US20090046858A1 (en) * 2007-03-21 2009-02-19 Technology Properties Limited System and Method of Data Encryption and Data Access of a Set of Storage Devices via a Hardware Key
KR20080101799A (ko) * 2007-05-18 2008-11-21 엠시엠 포트폴리오 엘엘씨 외부 장치에 보안을 제공하기 위한 시스템과 방법

Also Published As

Publication number Publication date
CN102473225B (zh) 2016-01-20
DE112009004950T5 (de) 2012-07-12
GB2484041A (en) 2012-03-28
GB201201099D0 (en) 2012-03-07
US20120102331A1 (en) 2012-04-26
GB2484041B (en) 2015-08-12
CN102473225A (zh) 2012-05-23
US8868920B2 (en) 2014-10-21

Similar Documents

Publication Publication Date Title
KR102340219B1 (ko) 스토리지 디바이스에 대한 신속한 데이터 보호
US9251381B1 (en) Solid-state storage subsystem security solution
US7765373B1 (en) System for controlling use of a solid-state storage subsystem
US8386797B1 (en) System and method for transparent disk encryption
RU2557756C2 (ru) Администрирование защищенными устройствами
US9141804B2 (en) Processor boot security device and methods thereof
EP1519275B1 (fr) Dispositif de stockage de donnees, procede de controle d'acces a la memoire, et programme d'ordinateur
EP2335181B1 (fr) Chiffrement externe et gestion de récupération avec des dispositifs de stockage à chiffrement matériel
EP1517244B1 (fr) Dispositif de stockage d'information, systeme et procede de commande d'acces a la memoire et programme d'ordinateur
US20080288782A1 (en) Method and Apparatus of Providing Security to an External Attachment Device
US20100058066A1 (en) Method and system for protecting data
US20090046858A1 (en) System and Method of Data Encryption and Data Access of a Set of Storage Devices via a Hardware Key
EP1519276A1 (fr) Dispositif de stockage d'informations, systeme et procede de controle d'acces a la memoire et programme informatique
US20080181406A1 (en) System and Method of Storage Device Data Encryption and Data Access Via a Hardware Key
US9495562B2 (en) Removable storage device data protection
US20110060921A1 (en) Data Encryption Device
US8266449B2 (en) Security for storage devices
US20150324612A1 (en) System and method for recovering from an interrupted encryption and decryption operation performed on a volume
US9147076B2 (en) System and method for establishing perpetual trust among platform domains
US8695085B2 (en) Self-protecting storage
US9563773B2 (en) Systems and methods for securing BIOS variables
CN109804598B (zh) 信息处理的方法、系统及计算机可读介质
US20120124391A1 (en) Storage device, memory device, control device, and method for controlling memory device
US10963592B2 (en) Method to unlock a secure digital memory device locked in a secure digital operational mode
CN103186479A (zh) 基于单操作系统的双硬盘隔离加密装置、方法及计算机

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 200980160426.0

Country of ref document: CN

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 09847422

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 13383383

Country of ref document: US

WWE Wipo information: entry into national phase

Ref document number: 1120090049508

Country of ref document: DE

Ref document number: 112009004950

Country of ref document: DE

ENP Entry into the national phase

Ref document number: 1201099

Country of ref document: GB

Kind code of ref document: A

Free format text: PCT FILING DATE = 20090712

WWE Wipo information: entry into national phase

Ref document number: 1201099.7

Country of ref document: GB

122 Ep: pct application non-entry in european phase

Ref document number: 09847422

Country of ref document: EP

Kind code of ref document: A1